Initial commit

apps/frigate/manifests/envoy-route.yaml

@@ -0,0 +1,20 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: frigate
+  namespace: frigate
+spec:
+  parentRefs:
+    - name: edge
+      namespace: gateway
+      sectionName: https
+  hostnames:
+    - frigate.kube.huskypup.net
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - name: frigate
+          port: 5000

apps/frigate/manifests/istio-virtualservice.yaml

@@ -0,0 +1,27 @@
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: frigate
+  namespace: frigate
+spec:
+  hosts:
+    - frigate.kube.huskypup.net
+  gateways:
+    - istio-system/edge
+  http:
+    # Authentik forward-auth endpoints must be reachable on the protected host
+    - match:
+        - uri:
+            prefix: /outpost.goauthentik.io
+      route:
+        - destination:
+            host: authentik-server.authentik.svc.cluster.local
+            port:
+              number: 80
+
+    - timeout: 3600s
+      route:
+        - destination:
+            host: frigate.frigate.svc.cluster.local
+            port:
+              number: 5000

apps/frigate/manifests/pvc.yaml

@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: frigate-config
+  namespace: frigate
+  labels:
+    app.kubernetes.io/name: frigate
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: rook-ceph-block
+  resources:
+    requests:
+      storage: 500Mi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: frigate-media
+  namespace: frigate
+  labels:
+    app.kubernetes.io/name: frigate
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: rook-ceph-block
+  resources:
+    requests:
+      storage: 500Gi

apps/frigate/manifests/secret.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: frigate-rtsp-credentials
+  namespace: frigate
+type: Opaque
+stringData:
+  # Update these with your actual camera credentials
+  # Then update apps/frigate/values.yaml with your camera RTSP URLs
+  FRIGATE_RTSP_USERNAME: your_camera_username
+  FRIGATE_RTSP_PASSWORD: your_camera_password